Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Comments – wpDiscuz <= 7.6.21 - Unauthenticated HTML Injection
Essential Addons for Elementor <= 5.9.26 - Authenticated (Contributor+) Stored Cross-Site Scripting
Salon booking system <= 10.7 - Authenticated (Administrator+) SQL Injection
WP User Frontend <= 4.0.7 - Authenticated (Administrator+) SQL Injection
Filter & Grids <= 2.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
WooCommerce PDF Vouchers <= 4.9.4 - Unauthenticated Arbitrary File Deletion
LiquidPoll – Advanced Polls for Creators and Brands <= 3.3.77 - Unauthenticated Stored Cross-Site Scripting
Black Widgets For Elementor <= 1.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Eventin <= 4.0.5 - Authenticated (Author+) Stored Cross-Site Scripting
Filter & Grids <= 2.8.33 - Cross-Site Request Forgery
Black Widgets For Elementor <= 1.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
WordPress File Upload <= 4.24.7 - Missing Authorization
LearnPress <= 4.2.6.8.2 - Authenticated (Subscriber+) Insecure Direct Object Reference
Custom 404 Pro <= 3.11.1 - Reflected Cross-Site Scripting
WP Social Feed Gallery <= 4.3.9 - Missing Authorization
Kubio AI Page Builder <= 2.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Tin Canny Reporting for LearnDash <= 4.3.0.7 - Reflected Cross-Site Scripting
Extensions for Elementor <= 2.0.31 - Authenticated (Contributor+) Stored Cross-Site Scripting
LearnPress <= 4.2.6.8.2 - Cross-Site Request Forgery
VikRentCar <= 1.4.0 - Unauthenticated SQL Injection
RegistrationMagic <= 6.0.0.1 - Unauthenticated Stored Cross-Site Scripting
WooCommerce PDF Vouchers <= 4.9.4 - Missing Authorization
Message Filter for Contact Form 7 <= 1.6.1.1 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.